Image forming apparatus and data management apparatus

ABSTRACT

There is described an image forming apparatus and a data management device, which make it possible to suppress the injustice use of the outputted recording medium, without employing the special paper sheet onto which the ID is attached in advance. The image forming apparatus for outputting an image, connected with the data management device, includes: a data file obtaining section to obtain a data file from the data management device; an image forming section to form an image on a recording medium based on the data file; an identification information generating section to generate identification information corresponding to each recording medium, when the image is formed on the recording medium; and a transmitting section to transmit the identification information corresponding to the recording medium, an output of which is completed, to the data management device.

RELATED APPLICATION

This application is based on Japanese Patent Application No. 2006-060576filed on Mar. 7, 2006 in Japanese Patent Office, the entire content ofwhich is hereby incorporated by reference.

BACKGROUND

1. Field of the Invention

The present invention relates to a data management apparatus thatconducts controlling operations of documents stored in it and an imageforming apparatus that conducts printing operations of the documentsbased on image data stored in the data controlling terminal device, andspecifically relates to a technology for preventing injustice usage ofthe printed documents.

2. Description of the Related Art

The document data ranked in a high level of secrecy have been protectedfrom injustice or unauthorized access possibly committed by a thirdparty, for instance, by employing an encryption technology and/or apassword. Further, when printing such the document of high secrecy, thecharacters of “Top Secret” or “Secret” have been also printed on thepaper sheet, in order to draw user's attention to the handling of thedocument concerned.

However, even if such the security countermeasures as mentioned in theabove are applied to the document, the security protection of theprinted document depends on the responsibility of the personnel whohandle the printed document. Therefore, there has been a fear thatsomeone else would illegally utilize the printed document due to acareless management of the document.

Accordingly, in order to secure the security of the printed document,such as where the printed document exist, whether or not the document tobe destroyed are correctly disposed, etc., for instance, Patent Document1 (Tokkai 2005-190365, Japanese Non-Examined Patent Publication) setsforth a managing technology for printing the document on a recordingpaper sheet to which an Identification (hereinafter, referred to as anID) is added in advance, and storing both the ID of the recording paperemployed for printing and the document ID into the output historydatabase.

Further, Patent Document 2 (Tokkai 2000-159410, Japanese Non-ExaminedPatent Publication) sets forth a paper classification apparatus thatdetermines whether or not a specific mark, such as “Top Secret”,“Secret”, etc., is attached to the printed recording paper sheet byemploying the image analysis when classifying the document into either areusable document or a non-reusable document. And, the apparatusdetermines that the recording paper to which the specific mark isattached is the non-reusable document, and cuts the paper into peaces soas to prevent the injustice usage of the non-reusable document.

According to the technology set forth in Patent Document 1 (Tokkai2005-190365, Japanese Non-Examined Patent Publication), there have beensuch the problems that it is necessary to employ a special paper sheeton which an ID is attached in advance, and in addition, when a papersheet, having an IC (Integrated Circuit) tag in which an ID is stored,is employed, a specific reading device for confirming the ID, etc.

Further, since all IDs of the paper sheets failed in output operationare stored as destroying information, an available capacity of thedatabase would be gradually reduced according as the operation periodhas elapsed, resulting in a possible deterioration of the retrievingvelocity.

Still further, according to the paper classification apparatus set forthin Patent Document 2 (Tokkai 2000-159410, Japanese Non-Examined PatentPublication), although the security in the phase of reusing the papersheet can be secured, the security problem during the period from thetime of printing to the time of reusing still remains unsolved. Yetfurther, in almost of all cases, the paper sheet suffered by an error,which could be repaired only by manual handling at the time of printing,such as a paper jamming, etc., would not be classified into the reusablecategory due to “tears” and/or “wrinkles”. Accordingly, it has beenimpossible for the paper classification apparatus set forth in PatentDocument 2 to prevent the injustice usage of the paper sheets failed inoutput operation.

SUMMARY

To overcome the abovementioned drawbacks in conventional image formingapparatus and data controlling terminal devices, it is an object of thepresent invention to provide an image forming apparatus and a datacontrolling terminal device (hereinafter, also referred to as a datamanagement apparatus), which make it possible to suppress the injusticeuse of the outputted recording medium, without employing the specialpaper sheet onto which the ID is attached in advance.

Further, it is another object of the present invention to provide animage forming apparatus and a data controlling terminal device, whichmakes it possible to reduce the amount of data to be stored as theoutput history at a level lower than ever.

In view of foregoing, an object of this invention is to solve at leastone of the problems, and to provide a new image forming apparatus anddata management apparatus.

The image forming apparatus for outputting an image, connected with adata management device, comprises a data file obtaining section toobtain a data file from the data management device; an image formingsection to form an image on a recording medium based on the data file;an identification information generating section to generateidentification information corresponding to each recording medium, whenthe image is formed on the recording medium; and a transmitting sectionto transmit the identification information corresponding to therecording medium, an output of which is completed, to the datamanagement device.

According to another aspect of the present invention, the datamanagement apparatus connected with an image forming device foroutputting an image, comprises a data file transmitting section totransmit a data file to the image forming device; an identificationinformation receiving section to receive identification informationcorresponding to each recording medium, each output of the recordingmedium where the image is formed based on the data file is completed;and a storing section to store the identification information.

The invention itself, together with further objects and attendantadvantages, will best be understood by reference to the followingdetailed description taken in conjunction with the accompanyingdrawings.

BRIEF DESCRIPTION OF THE DRAWINGS

Embodiments will now be described, by way of example only, withreference to the accompanying drawings which are meant to be exemplary,not limiting, and wherein like elements are numbered alike in severalFigures, in which:

FIG. 1 shows a system configuration of a document controlling systemembodied in the present invention, which includes an image formingapparatus and a data controlling terminal device;

FIG. 2 shows an electrical configuration of a multi function peripheralas an example of an image forming apparatus embodied in the presentinvention;

FIG. 3 shows a functional configuration of a document controlling serverin a data controlling terminal device;

FIG. 4 shows an example of information registered in a database;

FIG. 5 shows a flow of outputting operations of documents when thedocuments are outputted normally;

FIG. 6 shows an example of a correlating relationship between ageneration of paper sheet IDs and a state of attaching the paper sheetID to each of paper sheets, when an output operation for all of thepaper sheets results in a success;

FIG. 7 shows a flow of outputting operations of documents when an erroroccurs;

FIG. 8 shows an example of a correlating relationship between generationof paper sheet IDs, regeneration of the paper sheet ID and a state ofattaching the paper sheet ID to each of paper sheets, when an outputoperation of the paper sheet results in a failure;

FIG. 9 shows a flow of outputting operations of documents when an outputoperation is suspended;

FIG. 10 shows a flow of operations to be conducted by the user whenprinting a document;

FIG. 11 shows a flow of operations to be conducted by an authenticatingserver;

FIG. 12 shows a flow of operations to be conducted by a documentcontrolling server;

FIG. 13 shows a flow of operations to be conducted by an image formingapparatus; and

FIG. 14 shows a flow of operations to be conducted by a documentcontrolling server in such a case that it receives an inquiry in regardto a registration of a paper sheet ID.

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENT

Referring to the drawings, the embodiment of the present invention willbe detailed in the following.

FIG. 1 shows a system configuration of a document controlling system 5embodied in the present invention, which includes an image formingapparatus 10 and a data controlling terminal device 40. The documentcontrolling system 5 is constituted by the data controlling terminaldevice 40 for storing a data file of the document, and for totallycontrolling access information and output information in regard to thestored document, arbitral number of image forming apparatuses 10 a, 10b, 10 c, - - - , for conducting image forming operations based on thedata file acquired by accessing to the data controlling terminal device40. The data controlling terminal device 40 and the image formingapparatus 10 are connected to each other via a network 2. Any kind ofnetwork, such as, for instance, a LAN (Local Area Network), a WAN (WideArea Network), a WWW (World Wide Web), etc., can be employed as thenetwork 2.

An apparatus merely capable of forming image on a recording medium basedon the data file acquired by accessing to the data controlling terminaldevice 40 can be employed as the image forming apparatus 10.Accordingly, other than a printing apparatus 10 a and a multi functionperipheral 10 b, a computer 10 c capable of outputting the document byusing the printing apparatus 10 a or the multi function peripheral 10 bis also applicable as the image forming apparatus 10.

The data controlling terminal device 40 is constituted by a documentcontrolling server 41, an authenticating server 42 and a database 43serving as a storage section. The user can access to the authenticatingserver 42 and the document controlling server 41 through an arbitralterminal device or the image forming apparatus 10 coupled to thenetwork. The authenticating server 42 has an authenticating function forconducting the authenticate processing of the user who accesses to it.The document controlling server 41 totally controls the documents,namely, stores the access information and the output information intothe database 43 to control them.

Each of the document controlling server 41 and the authenticating server42 is constituted by a computer having a function for communicating withthe image forming apparatus 10 through the network 2, predeterminedcontrol programs to be executed by the computer, etc. The database 43 isconstituted by a nonvolatile mass storage, such as a HDD (Hard DiscDrive), etc., and a database program. The document controlling server41, the authenticating server 42 and the database 43 can be eitherconstructed as an integrated apparatus or disposed separately on thenetwork 2.

In the document controlling system 5, when the image forming operationis conducted on the basis of the data file acquired from the datacontrolling terminal device 40, the image forming apparatus 10 allots aninherent (individual) identification code (hereinafter, referred to as apaper sheet ID) to the recording medium on which an image is to beformed (hereinafter, referred to as a paper sheet), and at the sametime, transmits the paper sheet ID of the paper sheet, whose outputoperations (including processing of image-forming operation, postprocessing of the paper sheet, paper eject processing, etc.) arecompleted, to the data controlling terminal device 40 to register it.Then, the paper sheet having the paper sheet ID registered at the datacontrolling terminal device 40 is handled as a formal one printed in alegal procedure, while the paper sheet whose ID is not registered at thedata controlling terminal device 40 is handled as an injustice one.

FIG. 2 shows an electrical configuration of the multi functionperipheral 10 b as an example of the image forming apparatus 10. Themulti function peripheral 10 b is provided with a copy function, ascanner function, a printer function, a facsimile function, etc., and isconstituted by a CPU (Central Processing Unit) 11, a ROM (Read OnlyMemory) 12, a RAM (Random Access Memory) 13, a display section 14, anoperating section 15, a reading section 16, an image forming section 17,a communication section 18, a storage section 19, an image processingsection 21 and a bus 22 for coupling them to each other.

The CPU 11 has functions for controlling the overall operations of themulti function peripheral 10 b. The ROM 12 serves as a read only memoryin which various kinds of programs are stored in advance, while the RAM13 serves as a work memory in which various kinds of data aretemporarily stored and an image memory in which image data are storedwhen the CPU 11 executes the programs stored in the ROM 12.

The display section 14 is constituted by a liquid crystal display, etc.,so as to display various kinds of screens for the purpose of the userinterface, such as setting screens, operating screens, etc. Theoperating section 15 is constituted by a touch panel mounted on theliquid crystal display, operation switches, etc., so as to accept theoperating actions conducted by the user.

The reading section 16 has functions of optically reading the image ofthe original document and outputting the image data corresponding to theimage. The reading section 16 is constituted by a line image sensor,etc.

The image forming section 17 has a function for forming the image basedon the image data on the paper sheet. In this embodiment, the imageforming section 17 is configured as a laser printer provided with aconveyance device of the paper sheet, a photoreceptor drum, a chargingdevice, a laser unit, a developing device, a transferring and separatingdevice, a cleaning device and a fixing device, so as to form an imagethrough an electro-photographic process.

The communication section 18 has a function for communicating variouskinds of signals and data with the data controlling terminal device 40and other external devices through the network 2.

The storage section 19 serves as a storage device for storing the imagedata read by the reading section 16 and/or the data file received fromthe data controlling terminal device 40 in it. For instance, thenonvolatile mass storage, such as the HDD, etc., is employed for thestorage section 19.

The image processing section 21 has functions for applying various kindsof image processing operations, such as an enlarging processing, areduction processing, a rotation processing, a compression processing,an expansion processing, etc., to the image data.

The CPU 11 executes various kinds of predetermined programs stored inthe ROM 12, in order to serve as an acquiring section 11 a, an obtainingsection 11 b, an ID code generating section 11 c, an output completioncontrolling section 11 d, a transmitting section 11 e and a suspendingsection 11 f.

The acquiring section 11 a conducts a sequence of controlling operationswith respect to the acquisition of the output password to be utilized atthe time when obtaining the data file from the data controlling terminaldevice 40. Concretely speaking, the user authenticating operation isconducted by inquiring the authenticate information, inputted by theuser, from the authenticating server 42, and when the userauthenticating operation is completed as a success, the list ofdocuments output-allowable for the user is received from the documentcontrolling server 41. Further, after accepting the document desired andselected from the list of the documents by the user, the acquiringsection 11 a requests the document controlling server 41 to output theselected document concerned. Then, as a response for the above request,the acquiring section 11 a receives the output password for obtainingthe data file of the document concerned.

The obtaining section 11 b conducts controlling operations fortransmitting the output password acquired by the acquiring section 11 ato the data controlling terminal device 40 and for receiving the datafile corresponding to the output password from the data controllingterminal device 40. The ID code generating section 11 c has a functionfor generating an inherent paper sheet ID (identifying information) forevery paper sheet on which the image is to be formed, when the image isformed on the paper sheet based on the data file obtained by theobtaining section 11 b.

Since the paper sheet ID should be inherent to each of the paper sheets,when a plurality of image forming apparatuses 10 exists in the system,the ID code generating section 11 c is controlled so as not to generatea double paper sheet ID among the plurality of the image formingapparatuses 10.

For instance, the data controlling terminal device 40 designates andtransmits a row of characters inherent to the current output operationto the image forming apparatus 10, and the ID code generating section 11c of the image forming apparatus 10 generates the paper sheet ID byadding a serial number created in the image forming apparatus 10 side(for instance, a serial number starting from 1 for every job) to the rowof characters received. According to this procedure, it is possible togenerate the paper sheet IDs without duplication of them. Further, ifthe output password, acquired at the time when obtaining the data filefrom the data controlling terminal device 40, is inherent to the currentimage forming job, it is possible to employ the acquired output passwordfor a part of the paper sheet ID.

The output completion controlling section 11 d monitors whether or notthe paper ejecting operation of each of the paper sheets is normallycompleted after the image is formed on it, so as to determine the papersheet ID of the paper sheet, the paper ejecting operation of which isnormally completed, as an effective one. Further, when an outputmalfunction is detected, the output completion controlling section 11 ddestroys the paper sheet ID of the paper sheet concerned, and/orcontrols a generating operation of a new paper sheet ID to be replacedfor the paper sheet ID destroyed in the above. The transmitting section11 e conducts controlling operations for transmitting the effectivepaper sheet ID to the data controlling terminal device 40 every timewhen the output completion controlling section 11 d determines that thepaper sheet ID is effective (namely, every time when the paper ejectingoperation is normally completed). Incidentally, when transmitting thepaper sheet ID, it is applicable that date and time information of theimage forming operation and the output password to be employed whenoutputting the image on the basis of the data file are also transmittedwith the paper sheet ID, while correlating them with each other.

The suspending section 11 f has a function for accepting an instructionof job suspension sent from the operating section 15 or an externalterminal device. When the suspending section 11 f accepts theinstruction of job suspension, the transmitting section 11 e conductscontrolling operations for transmitting a delete requesting command, forrequesting a delete of the paper sheet ID already transmitted to thedata controlling terminal device 40 before the job suspension isactivated, to the data controlling terminal device 40. The deleterequesting command is transmitted while correlating with the outputpassword.

FIG. 3 shows a functional configuration of the document controllingserver 41 in the data controlling terminal device 40. As shown in FIG.3, the document controlling server 41 has functions of a registereddocument opening section 41 a, a password transmitting section 41 b, adata file transmitting section 41 c, an ID code receiving section 41 d,a registration controlling section 41 e and a registration confirmingsection 41 f.

When the user authenticating operation conducted in the authenticatingserver 42 is a success, the registered document opening section 41 atransmits the list of the documents output-allowable for the user to theimage forming apparatus 10 concerned. Incidentally, the data file of thedocument is stored in a mass storage device (not shown in the drawings)of the document controlling server 41. In response to the documentoutputting request sent from the image forming apparatus 10, thepassword transmitting section 41 b returns the output passwordcorrelated with the data file of the output-requested documentconcerned. Further, in response to the reception of the output passwordsent from the image forming apparatus 10, the data file transmittingsection 41 c transmits the data file, correlated with the outputpassword concerned, to the image forming apparatus 10 being the originalsender of the output password concerned.

The ID code receiving section 41 d receives the paper sheet IDssuccessively sent from the image forming apparatus 10 to store them intothe database 43. The registration controlling section 41 e controlsoperations for storing and deleting the paper sheet ID. For instance, inresponse to the delete requesting command sent from the image formingapparatus 10, the registration controlling section 41 e deletes thepaper sheet ID concerned from the database 43.

The registration confirming section 41 f accepts an inquiry sent fromthe external terminal device in regard to presence or absence of theregistration of the paper sheet ID, in order to investigate whether ornot the paper sheet ID concerned to the inquiry is stored in thedatabase 43, and then, returns the result of the investigation to theexternal terminal device being the sender of the inquiry.

FIG. 4 shows an example of the information registered in the database43. A main table 50, a corresponding table 60 and a paper sheet ID table70 are registered in the database 43. In the main table 50, a singlehorizontal line corresponds to a single outputting operation. Further, aname of document to be outputted (a name of data file), anoutput-requested date and time, a user ID, an output password alreadyissued, an output date and time, an output device (namely, a devicenumber inherent to the output device, etc.) and an output key code areregistered in the main table 50, while correlating them with each other.

The output key code and the paper sheet ID code are correlated with eachother and registered in the corresponding table 60, while the papersheet ID code and the paper sheet ID are correlated with each other andregistered in the paper sheet ID table 70. The main table 50 iscorrelated with the corresponding table 60 by the output key code, whilethe corresponding table 60 is correlated with the paper sheet ID table70 by the paper sheet ID code. For instance, it can be readily foundthat the document name of “test. doc” is correlated with the four papersheet IDs of “aaaa111”, “aaaa112”, “aaaa113” and “aaaa114”, by tracingthe output key code and the paper sheet ID code, and is printed on thefour paper sheets having the above paper sheet IDs.

Next, a flow of outputting operations of the documents conducted in thedocument controlling system 5 will be detailed in the following.

FIG. 5 shows a flow of outputting operations of the documents when thedocuments are outputted normally. In this flow, it is assumed that theuser inputs various kinds of operational commands from the operatingsection 15 of the multi function peripheral 10 b. when the user inputsinformation to be utilized for the authentication processing, the imageforming apparatus 10 transmits the authenticating information inputtedby the user to the authenticating server 42 (Step S101). Based on theauthenticating information received from the image forming apparatus 10,the authenticating server 42 conducts the user authentication processing(Step S102), and notifies the user of its result (Step S103). The resultis notified to the user through, for instance, the display section 14 ofthe image forming apparatus 10. Further, the authenticating server 42also transmits the user information of the user whose authenticationprocessing is a success to the document controlling server 41 (StepS104).

The document controlling server 41 retrieves a document, beingoutput-allowable for the user and corresponding to the user informationtransmitted form the authenticating server 42, form the documents storedin the document controlling server 41 (Step S105), and discloses theinformation in regard to the retrieved document for the user through theimage forming apparatus 10 (Step S106). In this embodiment, the documentlist, in which the titles of the retrieved documents are listed, istransmitted to the image forming apparatus 10 and is displayed on thedisplay section 14 of the image forming apparatus 10, in order to notifythe user of the registration information with respect to the documentsbeing output-allowable for the user. For instance, a document registeredwith the user name of the user concerned, a document for which the userconcerned is registered in the output-allowable user list, etc.corresponds to the documents being output-allowable for the user. Whatkind of document should be output-allowable could be determined by anappropriate rule for every system.

The user can select a desired document from the documents listed in thedocument list displayed on the document controlling server 41, and then,the image forming apparatus 10 transmits a command of requesting theoutput of the selected document to the document controlling server 41(Step S107).

In response to the abovementioned command transmitted from the imageforming apparatus 10, the document controlling server 41 generates anoutput password for the user to obtain the data file corresponding tothe output request, and notifies the user of the output password throughthe image forming apparatus 10 (Step S108). Further, the documentcontrolling server 41 adds and registers the information in regard tothe output request concerned into the main table 50 of the database 43(Step S109). Concretely speaking, the document controlling server 41adds a new record area to the main table 50 so as to register the nameof the document, the date and time of the output request, the user IDand the output password into the record area newly added.

The user inputs the output password, notified by the documentcontrolling server 41, from the operating section 15 of the imageforming apparatus 10 (Step S110). The image forming apparatus 10notifies the document controlling server 41 of the output passwordinputted by the user (Step S111). Then, the document controlling server41 authenticates the output password received from the image formingapparatus 10 (namely, confirming the coincidence with the outputpassword issued), and notifies the image forming apparatus 10 of theauthenticated result (Step S112). The image forming apparatus 10notifies the user of the authenticated result received from the documentcontrolling server 41 (Step S113), and, at the same time, if theauthentication of the output password results in a success, downloadsthe data file of the document correlated to the output passwordconcerned (Step S114).

When the downloading operation of the data file of the document iscompleted, the image forming apparatus 10 calculates the total number ofthe paper sheets to be used in the image forming job based on the datafile, and, preceding to the image forming operation of them, generatesthe paper sheet IDs corresponding to the total number of the papersheets calculated (Step S115).

The image forming apparatus 10 adds any unused one of the generatedpaper sheet IDs to the paper sheet on which the image is to be formed(Step S116), to print the image based on the data file on it, andoutputs the printed paper sheet (Step S117). In this embodiment, asynthesizing operation for synthesizing the paper sheet ID with theimage based on the data file is conducted so as to form the paper sheetID at a predetermined position located in a corner area of the papersheet, and then, the printing operation is conducted on the basis of thesynthesized image data.

When the paper ejecting operation is completed without occurrence of anyabnormal defect, such as a paper jamming, etc., and the output operationof the paper sheet on which the image is formed results in a success,the image forming apparatus 10 transmits the paper sheet ID attached tothe paper sheet whose paper ejecting operation is completed, the dateand time of the output operation and the output password to the documentcontrolling server 41 (Step S118), so that the document controllingserver 41 can register the transmitted information into the database 43(Step S119).

The abovementioned operational steps from Step S116 to Step S119 arerepeatedly conducted until the image forming job is completed. In otherwords, the notifying and registering operations of the paper sheet IDare sequentially conducted every time when the paper ejecting operationof the paper sheet, on which the image is formed, is completed.

When the output operations of all of the paper sheets are completed, theimage forming apparatus 10 transmits an output completion signal to thedocument controlling server 41 (Step S120), and at the same time,notifies-the user of the completion of the output operations. Inresponse to the output completion signal, the document controllingserver 41 recognizes the completion of the consecutive outputprocessing.

FIG. 6 shows an example of a correlating relationship between thegeneration of the paper sheet IDs and the state of attaching the papersheet ID to each of the paper sheets, when the output operation for allof the paper sheets results in a success. According to this example,four paper sheet IDs 81 (including “aaaa111”, “aaaa112”, “aaaa113”,“aaaa114”) are initially generated for four data files “test.doc”, andare respectively allotted to the paper sheets P1-P4 in a state of one byone, to print and output them. The image forming job shown in FIG. 6corresponds to the record of No. 1 in the main table 50 shown in FIG. 4,while the four paper sheet IDs 81 (including “aaaa111”, “aaaa112”,“aaaa113”, “aaaa114”), received from the image forming apparatus 10, areregistered in the records of No. 1-No. 4 of the paper sheet ID table 70.

FIG. 7 shows a flow of outputting operations of the documents when anerror occurs. Since the processing to be conducted in the operationsfrom Step S101 to Step S115 are the same as those in the FIG. 5, theexplanations of them will be omitted. Although the image formingapparatus 10 adds any unused one of the paper sheet IDs for all of thepaper sheets, which are initially generated in Step S115, to the papersheet on which the image is to be formed (Step S141), and printoutsthem, an error, such as the paper jamming, etc., occurs in theoutputting operation (such as the processing for image formingoperation, the post processing after the completion of the image formingoperation, the paper ejection processing, etc.) of the paper sheetconcerned (Step S142).

The user eliminates the cause of the error concerned, by removing thejammed paper, or the like (Step S143). The image forming apparatus 10destroys the paper sheet ID allotted to the paper sheet in which theerror occurs (Step S144), and regenerates a new paper sheet ID as analternative of the destroyed paper sheet ID (Step S145). The regeneratedpaper sheet ID is an inherent paper sheet ID, which is different fromthe destroyed paper sheet ID and does not duplicate with any other papersheet ID.

This regenerated paper sheet ID is added to a paper sheet, which is tobe initially printed just after the recovery from the error (Step S146),and the paper sheet is printed and outputted (Step S147). When the paperejecting operation of the paper sheet is completed without anyoccurrence of an abnormality, such as the paper jamming, etc., and theoutput operation of the paper sheet results in a success, the papersheet ID added to the ejected paper sheet (namely, the regenerated papersheet ID), date and time of the output operation and the output passwordare transmitted to the document controlling server 41 (Step S148) so asto register them into the database 43 (Step S149).

When the output operations of all of the paper sheets are completed, theimage forming apparatus 10 transmits an output completion signal to thedocument controlling server 41 (Step S150), and at the same time,notifies the user of the completion of the output operations (StepS151), so as to finalize the consecutive output operations.

FIG. 8 shows an example of a correlating relationship between thegeneration of the paper sheet IDs, the regeneration of the paper sheetID and the state of attaching the paper sheet ID to each of the papersheets, when the output operation of the paper sheet results in afailure. According to this example, three paper sheet IDs 82 (including“1111qew”, “1112qew”, “1113qew”) are initially generated for three datafiles “fpd.doc”. The image to be printed on the first page is printedonto the paper sheet P11, to which the paper sheet ID of “1111qew” isattached, and succeeded in the output operation. Although the image tobe printed on the second page is printed onto the paper sheet P12, towhich the paper sheet ID of “1112qew” is attached, the paper sheet P12has suffered an error, such as a paper jamming, etc., and failed in theoutput operation. Accordingly, corresponding to the error, a new papersheet ID 83 (namely, “1114qew”) is regenerated. The image to be printedon the second page is reprinted onto the paper sheet P13, to which theregenerated paper sheet ID of “1114qew” is attached, and succeeded inthe output operation. The image to be printed on the third page isprinted onto the paper sheet P14, to which the paper sheet ID of“1113qew” is attached, and succeeded in the output operation.

In the abovementioned case, the paper sheet ID of “1112qew” attached tothe paper sheet P12 is destroyed so as not to transmit it to thedocument controlling server 41, while only the paper sheet IDs (such as“1111qew”, “1114qew”, “1113qew”) of the paper sheets, which succeeded inthe output operation, are transmitted to the document controlling server41. The image forming job shown in FIG. 8 corresponds to the record ofNo. 2 in the main table 50 shown in FIG. 4, while the three paper sheetIDs (including “1111qew”, “1114qew”, “1113qew”), received from the imageforming apparatus 10, are registered in the records of No. 5-No. 7 ofthe paper sheet ID table 70.

FIG. 9 shows a flow of outputting operations of the documents when theoutput operation is suspended. Since the processing to be conducted inthe operations from Step S101 to Step S119 are the same as those in theFIG. 5, the explanations of them will be omitted. In the example shownin FIG. 9, the output operation for the first paper sheet results in asuccess (Step S117), and after the paper sheet ID of the first papersheet is transmitted to the document controlling server 41 to registerit into the database 43 (Step S118, Step S119), the image formingapparatus 10 receives an instruction of job suspension from the user(Step S161). Receiving the instruction of job suspension, the imageforming apparatus 10 deletes the image forming job concerned (StepS162), and further, transmits a deletion request command signal forrequesting the deletion of the paper sheet ID transmitted before the jobsuspension (Step S163). The deletion request command signal istransmitted with the output password.

In response to the deletion request command signal received from theimage forming apparatus 10, the document controlling server 41 deletesthe registration items concerned (Step S164). Concretely speaking, basedon both the deletion request command signal and the output passwordreceived, the document controlling server 41 specifies the registrationitems to be deleted, so as to delete the concerned records from the maintable 50, the corresponding table 60 and the paper sheet ID table 70,respectively. For instance, when the document controlling server 41receives the deletion request command signal in a mid-course ofimplementing the image forming job in regard to the record of No. 4 inthe main table 50 shown in FIG. 4, the document controlling server 41will delete the record of No. 4 in the main table 50, the records of No.9-No. 12 in the corresponding table 60 and the records of No. 9-No. 12in the paper sheet ID table 70, which are indicated by mark “*” shown inFIG. 4.

On the security point of view, the paper sheet failed in the outputoperation or printed before the job suspension should be disposed as awaste material, by nature. However, even if such the paper sheet isutilized for an injustice purpose without being appropriately disposed,the paper sheet ID of the paper sheet failed in the output operation orprinted before the job suspension is not registered in the database 43of the data controlling terminal device 40. Accordingly, in the event ofemploying the printed paper sheet, when the paper sheet concerned is notregistered in the database 43, as a result of inquiring presence orabsence of the registration of the paper sheet ID concerned from thedata controlling terminal device 40, it is possible to recognize thatthe paper sheet to which the paper sheet ID concerned is attached shouldbe disposed as a waste material, by nature, but is utilized for theinjustice purpose. Therefore, it becomes possible to take an appropriatecountermeasure for such the injustice use.

For instance, when selling commercial products through the network, insuch the case that a system, in which a ticket for receiving thecommercial product is downloaded to print it, and the printed ticket isexchanged for the commercial product at a store, is operated, it becomespossible to prevent the injustice utilization of the ticket, whichfailed in the printout operation and should be disposed by nature as awaste material, by attaching the paper sheet ID to the ticket to beprinted, for controlling purpose. In other words, since the paper sheetID printed on the injustice ticket to be disposed is not registered inthe database 43 of the data controlling terminal device 40, whenexchanging the ticket for the commercial product, by inquiring of thedata controlling terminal device 40 presence or absence of theregistration of the paper sheet ID of the ticket from a terminal deviceinstalled at the store, if the answer is absence of the registration, itis possible to find the injustice utilization of the ticket.

Incidentally, it is needless to say that the present invention is alsoapplicable for other securities and print products having commercialvalues.

Further, since only the paper sheet ID of the paper sheet, whichsucceeded in the output operation, is registered, the amount of data tobe stored in the database 43 is considerably reduced, compared to thatin the case that all of data including the history information of failedoutput operation are stored. Accordingly, it becomes possible to conducteffective controlling operations in regard to the output information.

Next, a flow of operations conducted by the user and each of theapparatuses will be detailed in the following.

FIG. 10 shows operations to be conducted by the user when printing thedocument. The flowchart of user's operations shown in FIG. 10 includesthe steps of: inputting authenticating information (Step S201);accessing to the document controlling server 41 to acquire the documentlist, when the authentication results in a success (Step S202, Yes); andselecting a document desired to print form the document list concerned(Step S203). At this time, it becomes possible for the user to view theselected document.

The flowchart of user's operations shown in FIG. 10 further includes thesteps of: inputting the output password issued by the documentcontrolling server 41 (Step S204); authenticating the output passwordinputted by the user by means of the document controlling server 41;printing and outputting the document when the authenticating stepresults in a success (Step S205, Yes); conducting an operation forremoving the cause of an error when the error happen to occur in amid-course of the output operation, for instance, removing a jammedpaper to destroy it when a paper jamming error occurs, etc., (StepS207); and destroying the documents outputted so far, as a wastedisposal (Step S208, Yes), when suspending the output operation(suspension of the job concerned) (Step S209).

FIG. 11 shows operations to be conducted by the authenticating server42. The flowchart of the authenticating server 42 shown in FIG. 11includes the steps of: examining the authentication information receivedfrom the user through the multi function peripheral 10 b, the computer10 c, etc. (Step S221); notifying the document controlling server 41 ofthe user information concerned (Step S224) so as to finalize theprocessing (END), when the authentication results in a success (StepS222, Yes); and notifying the user of an predetermined error messageindicating contents of the error (Step S223), when the authenticationresults in a failure (Step S222, No).

FIG. 12 shows operations to be conducted by the document controllingserver 41. The flowchart of the document controlling server 41 shown inFIG. 12 includes the steps of: acquiring the user information from theauthenticating server 42 (Step S241); retrieving the document registeredcorresponding to the user concerned in order to notify the user of itsdocument list (Step S242); receiving the output request command forrequesting the document selected from the document list (Step S243);issuing and transmitting the output password for outputting the documentin regard to the output request command (Step S244); and registering theinformation in regard to the document, the information in regard to theaccessed user, the generated output password, etc. into the database 43as additional registration data.

The flowchart of the document controlling server 41 shown in FIG. 12further includes the steps of: receiving the output password (Step S246)after Step S245; determining whether or not the received output passwordcoincides with the output password already issued (Step S247); sendingan error message (Step S248) and returning to the standby state forwaiting the reception of the output password (Step S246), when not inStep S247; commencing an operation for downloading the data file of thedocument concerned (Step S249), when determining that the receivedoutput password coincides with the output password already issued (StepS247, Yes); registering the received paper sheet ID into the database 43(Step S251), when the notification of the paper sheet ID is received(Step S250, Yes); deleting the concerned registration from the database43 (Step S253), when the delete requesting command is received (StepS252, Yes); and finalizing the processing (END).

The flowchart of the document controlling server 41 shown in FIG. 12further includes the steps of: returning to Step S250 to continue theprocessing, when the delete requesting command is not received (StepS252, No) and the output completion signal is not received (Step S254,No); completing the registering operation to the database 43 (StepS251), when the output completion signal is received (Step S254, Yes);and finalizing the processing (END).

FIG. 13 shows operations to be conducted by the image forming apparatus10. The flowchart of the image forming apparatus 10 shown in FIG. 13includes the steps of: downloading the data file of the documentselected by the user (Step S261); and initially generating the papersheet IDs to be attached to each of the paper sheets when printing theimages in regard to the data file (Step S262). The abovementioned papersheet IDs are generated for a number of paper sheets to be printed.

The flowchart of the image forming apparatus 10 shown in FIG. 13 furtherincludes the steps of: conducting the printing operation of a papersheet, being one of the paper sheets to be printed, by attaching anyunused one of the generated paper sheet IDs onto the paper sheet (StepS264); destroying the paper sheet ID attached to the paper sheet (StepS266), when the output operation of the paper sheet results in a failuredue to the paper jamming, etc. (Step S265, No); regenerating a new papersheet ID to be attached to a next paper sheet used for the recoveryoperation of the failed paper sheet (Step S267); conducting again theprinting operation by attaching the regenerated paper sheet ID to thenext paper sheet (Step S264); notifying the document controlling server41 of the paper sheet ID attached to the concerned paper sheet so as toregister it into the database 43 (Step S268), when the output operationresults in a success (when the paper ejecting operation is completed)(Step S265, Yes); transmitting the delete requesting command fordeleting the information with respect to the output operation of thedocument concerned (Step S270), when the job suspension command isreceived before completion of the printing operation of the documentconcerned (Step S269, Yes); deleting the concerned job from the imageforming apparatus 10 (Step S272) to finalize the processing (END);investigating whether or not the printing operation in regard to the jobconcerned is completed (Step S271), when the job suspension command isnot received (Step S269, No); returning to Step S264 to continue theprinting operation, when not in Step S271; deleting the job concerned(Step S272), when determining that the printing operation of all pagesin regard to the job concerned is completed (Step S271, Yes); andfinalizing the processing (END).

FIG. 14 shows operations to be conducted by the document controllingserver 41 in such a case that it receives an inquiry in regard to theregistration of the paper sheet ID when using the paper sheet printed onthe basis of the data file. The flowchart of the document controllingserver 41 shown in FIG. 14 includes the steps of: receiving an inquiryrequest attached with the paper sheet ID and sent from an arbitralterminal device, such as a computer, etc., (Step S281); retrievingwhether or not the paper sheet, which is the same as that concerned tothe inquiry request, is already registered (Step S282); and transmittingits retrieving result back to the terminal device of the sender of theinquiry request (Step S283). It is also applicable that, when the papersheet ID concerned to the inquiry request is already registered, theinformation correlated to the paper sheet ID concerned, such as the userinformation, the name of the document, etc., are transmitted to theterminal device of the sender of the inquiry request.

Referring to the drawings, the embodiment of the present invention isdescribed in the foregoing. However, the scope of the present inventionis not limited to the embodiment described in the foregoing. Disclosedembodiment can be varied by a skilled person without departing from thespirit and scope of the invention.

For instance, although the image forming apparatus 10 notifies thedocument controlling server 41 of the paper sheet ID attached to thepaper sheet every time when the output operation of the paper sheetresults in a success in the abovementioned embodiment, it is alsoapplicable that the image forming apparatus 10 notifies the documentcontrolling server 41 of the paper sheet IDs in a unit of the jobconcerned (namely, those for a plurality of pages at a time). Concretelyspeaking, during the implementation of the job, the image formingapparatus 10 stores the paper sheet IDs of the paper sheets, each ofwhich results in a success, in it, and, when the job is normallycompleted, the paper sheet IDs stored so far in the image formingapparatus 10 are transmitted to the document controlling server 41 at atime, so as to register them in it. This operation for transmitting thepaper sheet IDs at a time also serves as a output operation completingsignal. Further, with respect to the date and time information and theoutput password, it is also applicable that those are transmitted in aunit of the job concerned at a time, and are attached in a unit of thejob concerned, instead of attached for every recording medium. On theother hand, the paper sheet ID attached to the paper sheet, which isfailed in the output operation, is destroyed without included in theobjects to be transmitted to the document controlling server 41.Further, when the job is suspended, the image forming apparatus 10transmits the delete requesting command to the document controllingserver 41. In response to the delete requesting command, the documentcontrolling server 41 deletes the information initially registered intothe database 43 in regard to the current output operation (thoseregistered in Step S109 shown in FIG. 5).

Still further, although the data file of the document can be downloadedafter the output password is authenticated in the abovementionedembodiment, it is also applicable that the present invention is appliedto such a system in which the data file of the document can bedownloaded in response to the request from the user without conductingthe authenticating operation, so as to conduct the operations in regardto the generation, the addition and the registration of the paper sheetID. Still further, it is also applicable to discriminate whether or notthe operations in regard to the generation, the addition and theregistration of the paper sheet ID are conducted corresponding to theproperty of the data file. For instance, other than the propertiesdirectly indicating the presence or absence of the protection, such asthe ON/OFF of the security protection of the data file itself, theON/OFF of the security protection of the outputted document, theproperties indirectly indicating the presence or absence of theprotection, such as the charged/free of the output operation, thepresence or absence of the limitations due to the copyright, are alsoapplicable.

When adding the paper sheet ID to the recording medium, other than themethod for printing the paper sheet ID by employing characters andsymbols, for instance, a method for converting the content of the papersheet ID to the computer readable coded information, such as a barcode,etc., is also applicable.

Incidentally, it is also applicable that an effective date isestablished for the output password, so that the output password iscontrolled to expire in such a case that the downloading operation ofthe data file correlated to the output password is not conducted untilthe effective date has elapsed.

According to the image forming apparatus and the data managementapparatus embodied in the present invention, the following effects canbe attained.

Since the identification information are allotted to every recordingmedium to be image-formed, and the identification information attachedto the recording medium, on which the image is already formed, areregistered into the data controlling terminal device, by inquiring thepresence or absence of the registration of the identificationinformation from the data controlling terminal device, it becomespossible to suppress the injustice use of the recording medium, which issuspended in the mid-course of the image forming operation or failed inthe output operation without employing the special paper sheet ontowhich the ID is attached in advance.

According to another aspect of the present invention, since the datacontrolling terminal device stores only the identification informationwith respect to the recording mediums, which succeeded in the outputoperations, while does not store the identification information allottedto the recording mediums, which are suspended or failed in the outputoperation, in it, it becomes possible to prevent the recording mediumsto be destroyed primarily, which are suspended or failed in the outputoperation, from being utilized for injustice purposes, while suppressingthe amount of data to be stored as the output history.

While the preferred embodiments of the present invention have beendescribed using specific term, such description is for illustrativepurpose only, and it is to be understood that changes and variations maybe made without departing from the spirit and scope of the appendedclaims.

1. An image forming apparatus for outputting an image, connected with adata management device, comprising: a data file obtaining section toobtain a data file from the data management device; an image formingsection to form an image on a recording medium based on the data file;.an identification information generating section to generateidentification information corresponding to each recording medium, whenthe image is formed on the recording medium; and a transmitting sectionto transmit the identification information corresponding to therecording medium, an output of which is completed, to the datamanagement device.
 2. The image forming apparatus of claim 1, whereinthe transmitting section transmits the identification information to thedata management device, when each output of the recording medium wherethe image is formed based on the data file is completed.
 3. The imageforming apparatus of claim 2, further comprising: an canceling sectionto accept an instruction for canceling an image forming process based onthe data file; wherein request signals for deleting the identificationinformation transmitted prior to a cancellation is transmitted to thedata management device, when the instruction is accepted.
 4. The imageforming apparatus of claim 1, wherein the transmitting section transmitsthe identification information to the data management device inaccordance with a completion of an image forming job based on the datafile.
 5. The image forming apparatus of claim 1, wherein theidentification information generating section generates theidentification information prior to an image forming process based onthe data file.
 6. The image forming apparatus of claim 1, furthercomprising: a password obtaining section to obtain a password forobtaining the data file from the data management device; wherein thedata file obtaining section obtains the data file in accordance withinput of the password.
 7. The image forming apparatus of claim 1,wherein the identification information generating section generates theidentification information in accordance with an attribution of the datafile.
 8. The image forming apparatus of claim 1, wherein in case that anerror is occurred during an image outputting, the identificationinformation corresponding to the recording medium that the error isoccurred at the image outputting for is deleted.
 9. The image formingapparatus of claim 1, wherein in case that an error is occurred duringan image outputting, new identification information is generated inplace of the identification information corresponding to the recordingmedium that the error is occurred at the image outputting for.
 10. Theimage forming apparatus of claim 1, wherein an identificationinformation image is formed on each recording medium based on theidentification information.
 11. The image forming apparatus of claim 1,wherein date and time information is transmitted with the identificationinformation, the date and time information represents date and time whenan image forming process is executed.
 12. A data management apparatusconnected with an image forming device for outputting an image,comprising: a data file transmitting section to transmit a data file tothe image forming device; an identification information receivingsection to receive identification information corresponding to eachrecording medium, each output of the recording medium where the image isformed based on the data file is completed; and a storing section tostore the identification information.
 13. The data management apparatusof claim 12, wherein the receiving section receives the identificationinformation from the image forming device, when each output of therecording medium where the image is formed based on the data file iscompleted.
 14. The data management apparatus of claim 13, whereinrequest signals for deleting the identification information from theimage forming device is received in accordance with a cancellation foran image forming process based on the data file.
 15. The data managementapparatus of claim 14, wherein the identification information stored inthe storing section is deleted in accordance with a reception of therequest signals.
 16. The data management apparatus of claim 12, whereinidentification information receiving section receives the identificationinformation from the image forming device in accordance with acompletion of an image forming job based on the data file.
 17. The datamanagement apparatus of claim 16, wherein the identification informationcorresponding to the recording medium that the error is occurred at theimage outputting for is not received.
 18. The data management apparatusof claim 12, further comprising: a password transmitting section totransmit a password associated with the data file to the image formingdevice, wherein the data file transmitting section transmits the datafile in accordance with a reception of the password.
 19. The datamanagement apparatus of claim 12, wherein date and time information isreceived with the identification information, the date and timeinformation represents date and time when an image forming process isexecuted.
 20. The data management apparatus of claim 12, furthercomprising: a registration confirmation section to receive an inquirywhether the identification information is registered, check whether theidentification information is stored in the storing section, and respondto the inquiry based on a check result.